Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3139322e302f31382d3232203d3e2036353335.roa
File:                     3139302e35342e3139322e302f31382d3232203d3e2036353335.roa (raw, json)
Hash identifier:          cHJaA+ONytgahiq6lDjrSRpJrUk7HCGHyfkKYR93LRs=
Subject key identifier:   69:33:C1:96:3C:C2:7C:AE:11:9F:71:0E:E4:6E:89:25:6D:B0:01:C4
Certificate issuer:       /CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
Certificate serial:       749255AE95468F901ECB262EEA6C208CF1726C7B
Authority key identifier: CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3139322e302f31382d3232203d3e2036353335.roa
Signing time:             Tue 05 Mar 2024 18:17:08 +0000
ROA not before:           Tue 05 Mar 2024 18:12:08 +0000
ROA not after:            Tue 04 Mar 2025 18:17:08 +0000
asID:                     6535
IP address blocks:        190.54.192.0/18 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:92:55:ae:95:46:8f:90:1e:cb:26:2e:ea:6c:20:8c:f1:72:6c:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CACAD70CF58B172E6D319A83D97EE37DB5B43E8B
        Validity
            Not Before: Mar  5 18:12:08 2024 GMT
            Not After : Mar  4 18:17:08 2025 GMT
        Subject: CN=6933C1963CC27CAE119F710EE46E89256DB001C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f9:5f:4a:70:d0:63:14:f1:24:48:79:cd:c3:
                    8e:f2:aa:11:e2:3f:1d:f0:16:ab:fe:75:b8:28:68:
                    ac:b5:61:2c:f5:f9:64:88:cb:dd:1f:79:83:56:dc:
                    ab:2c:2d:95:3d:ea:df:df:4f:24:23:f6:9c:2c:31:
                    73:09:de:4a:60:ab:6b:69:1d:91:7b:20:c3:15:9a:
                    5b:c1:94:bf:ee:a5:f5:a5:86:59:9a:a0:79:5f:40:
                    06:af:df:ad:5c:56:33:e0:b3:97:48:7e:6c:76:d2:
                    1d:2a:e1:ce:9f:93:cd:a6:74:4a:89:ee:08:45:ed:
                    33:ef:b9:50:c6:3f:73:c5:45:c3:d4:7a:e6:4c:23:
                    fb:40:f0:89:d7:28:89:80:9f:61:b7:21:e2:bb:6d:
                    97:01:5d:3e:f0:0d:a9:26:b4:c6:18:c2:41:62:fb:
                    c8:ea:47:17:0d:13:79:f6:75:00:2f:3c:93:a3:34:
                    b1:03:4c:0c:b3:77:6d:91:25:4b:d6:85:43:b0:28:
                    fe:cc:e8:f4:14:de:21:fb:97:80:c6:17:26:d8:17:
                    e9:09:56:bf:e7:cb:8b:72:e8:3b:ae:4a:54:04:14:
                    2f:df:5b:8d:90:55:41:bf:88:b8:c8:d3:f6:b2:68:
                    31:74:63:7a:1f:b5:a3:14:de:32:ab:b7:76:c5:af:
                    ec:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:33:C1:96:3C:C2:7C:AE:11:9F:71:0E:E4:6E:89:25:6D:B0:01:C4
            X509v3 Authority Key Identifier:
                keyid:CA:CA:D7:0C:F5:8B:17:2E:6D:31:9A:83:D9:7E:E3:7D:B5:B4:3E:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CACAD70CF58B172E6D319A83D97EE37DB5B43E8B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1707840DCF59A833F5F9735ABB7DAB9A31BC3A36A388719B238E79CBD285869B/0/3139302e35342e3139322e302f31382d3232203d3e2036353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2e:22:9f:a8:42:b9:b1:98:ce:cc:a4:01:09:ec:4f:d1:32:39:
         b2:38:27:fb:4c:d5:5b:c6:82:40:cc:02:52:1b:ca:d4:5f:6b:
         90:53:ba:91:3d:d2:ee:c5:1f:33:24:0b:07:f9:c0:46:43:ce:
         6f:dd:b0:23:e3:b2:27:fa:7d:de:88:c0:3a:30:35:04:94:28:
         a4:26:82:b4:e3:62:42:6c:be:21:c7:01:9c:6e:e1:b7:2c:c0:
         1a:18:81:97:94:d1:e8:b0:7a:f8:1b:d8:d5:3d:56:c3:80:63:
         5d:a7:54:e1:01:06:1f:ed:07:a7:b1:b7:ff:0f:68:7a:06:05:
         eb:b8:fd:51:b6:15:35:da:0e:14:e9:c2:36:4b:8c:2e:3a:cb:
         5d:87:f5:0c:6c:62:28:8f:1c:df:cb:67:ea:0a:0c:a2:4d:dc:
         2f:a4:01:84:9d:5e:18:e6:4c:d4:22:7e:f6:e2:bb:17:b5:91:
         93:bb:47:4b:47:ef:85:fa:dc:ef:24:1e:10:a8:d5:c2:67:e6:
         02:0f:65:51:1a:db:de:16:10:07:44:33:91:d7:00:dc:29:6a:
         d0:0e:31:b9:90:e2:ae:ae:d9:ee:a8:85:25:2f:4d:90:3a:45:
         3b:62:51:fd:4a:26:68:6a:c5:13:33:ee:09:7b:fd:11:52:ff:
         81:cb:cb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 23:45:59 2024 by rpki-client on console-fra.rpki-client.org